Barney's Blog

Blog archive

Vista Vulnerable Via Vendors

Microsoft is a bit like the Boston Celtics -- they just can't win. Here Redmond goes and builds a desktop operating system it believes is as secure as any (well, maybe not DOS), only to have critics complain that Vista can be hacked by attacking third-party programs. For instance, ARCserve Backup from CA is just one source of buffer overflow attacks, security experts say.

The problem, according to our own Security Watch newsletter author Russ Cooper, is that old versions of software don't avail themselves of new Vista security features. I'm not sure if updating to Vista, updating all your hardware and buying new versions of all third parties is quite what IT is looking for.

Posted by Doug Barney on February 12, 2007


Featured

  • Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40M in Phishing Fraud

    In a coordinated action spanning the United States and the United Kingdom, Microsoft’s Digital Crimes Unit (DCU) and international law enforcement collaborators have taken down RedVDS, a subscription based cybercrime platform tied to an estimated $40 million in fraud losses in the U.S. since March 2025.

  • Sound Wave Illustration

    CrowdStrike's Acquisition of SGNL Aims to Strengthen Identity Security

    CrowdStrike signs definitive agreement to purchase SGNL, an identity security specialist, in a deal valued at about $740 million.

  • Microsoft Acquires Osmos, Automating Data Engineering inside Fabric

    In a strategic move to reduce time-consuming manual data preparation, Microsoft has acquired Seattle-based startup Osmos, specializing in agentic AI for data engineering.

  • Linux Foundation Unites Major Tech Firms to Launch Agentic AI Foundation

    The Linux Foundation today announced the creation of a new collaborative initiative — the Agentic AI Foundation (AAIF) — bringing together major AI and cloud players such as Microsoft, OpenAI, Anthropic and other major tech companies.